SkyHorse.Org

Fixing open DNS servers

Ok, there seems to be a *lot* of posts and threads about this issue and I think a simple page is appropriate.

Lets start with the problem. Check the report for your domain here: http://www.dnsreport.com/tools/dnsreport.ch?domain=YOUR_DOMAIN_HERE.COM

An open DNS server is one that replies to a query about a domain it is not responsible for, to anyone who asks for it. For starters, that is just a waste of processing time, but it can be worse if it is used for flooding. See, since a DNS query is (much!) smaller in number of bytes than a DNS response, if it is spoofed it can be used to perform a DoS attack on a computer with several times the bandwidth of the perpretator.

I’ve posted a solution to my obscure cPanel guide, have a look if your interested:
Fixing Open DNS servers

Related posts:

• Major flaw on the DNS Internet architecture discovered
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• ModSecurity 2.5 : a book by Magnus Mischel

Posted in GNU/Linux, hosting, WHM | No Comments »

modsec.sh updated

I’ve updated the modsec.sh script to include some new rules from gotroot.com.

Check out its new permanent page at http://www.skyhorse.org/web-server-administration/auto-update-modsecurity-rules-modsecsh/

Related posts:

• Auto update modsecurity rules – modsec.sh
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• Server-side redirection (a.k.a. tunneling) with PHP

Posted in cPanel, hacking, WHM | No Comments »